Security Group and Network
Security group is a stateful virtual firewall for filtering packets. You can restrict access by using a firewall (security group) to allow the trusted addresses to access instances. Different security group rules for instance groups of different security levels are created to ensure that the instances running important business cannot be accessed easily from the outside.
You need to regularly repair, update and protect the operating system and applications on the instance.
With EIPs, you can quickly remap an address to another instance in your account (or NAT gateway instance) to block instance failures. For more information, see Elastic IP.
Log in to user's Linux instances by use of SSH Key whenever possible. For the instances that you log in with password, the password needs to be changed from time to time.
Choose to use Virtual Private Cloud to divide logical areas.
Storage
For the data that requires high reliability, use Tencent Cloud's Cloud Block Storage to ensure the persistent and reliable data storage. Try not to select Local Disk for storage (Rendering GA2 only supports Cloud Block Storage).
For databases that are frequently accessed and variable in size, use Tencent Cloud Database.
You can use COS to store important data, such as static web pages, massive images and videos.
Backup and Recovery
One of the recovery methods is to rollback a Custom Image you backed up via CVM Console.
Deploy key components of an application across multiple availability zones, and copy the data as appropriate.
Regularly view the monitoring data and set alarms as appropriate. For more information, see Cloud Monitor Product Documentation.
Process emergent requests with Auto Scaling. For more information, see Auto Scaling Product Documentation.
Yes
No
Was this page helpful?